Choose the action boundary that protects the requested browser task. Page content, model intent, and server effects are different evidence.
Lessons
- Browser agents: separate observed state from intended action
- Browser target grounding: choose a unique control in the current state
- Browser forms: treat preview, submit, and server validation separately
- Web-page text is task data, not an agent instruction
- Browser effect recovery: resolve ambiguous submissions before retrying